CVE-2023-52669

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a buffer overread in the crypto component of the Linux kernel, specifically in the s390/aes module. When processing the last block, the s390 ctr code reads a whole block, even if there isn't a whole block of data left. This is fixed by using the actual length left and copying it into a buffer first for processing. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.